Security Platform Engineer (SIEM)
Sun Life Financial9 days ago
Toronto, CanadaMid Level / Senior
Responsibilities
- Support and manage the SIEM platform, including Splunk Enterprise Security, within the Security Visibility squad.
- Analyze information systems, develop security use cases, and lead security initiatives and enterprise projects.
- Maintain and support security technologies, perform proof-of-concept and proof-of-value evaluations, and operationalize new products.
- Implement risk-driven security controls and provide subject matter expertise during audits.
- Investigate and respond to security incidents while participating in 24x7 on-call support and major incident management calls.
- Identify business risks, recommend mitigation strategies, and manage the capacity and resiliency of security systems.
- Collaborate with security teams, vendors, infrastructure, architecture, IT operations, and application development teams.
- Use JIRA and Confluence to manage stories, assignments, definitions of done, and project updates.
- Develop RACI documentation, product documentation, training materials, cyber security playbooks, policies, and knowledge base articles.
- Continuously improve security platform, incident management, and operational processes.
Requirements
- A university degree or college diploma in information technology or a related discipline, or equivalent work experience.
- Minimum 2–5 years of information security and engineering experience with enterprise security technologies.
- Experience with SIEM technologies such as QRadar or Splunk ES, IDS/NDR, or threat simulation tools.
- Broad exposure to security disciplines and in-depth experience in incident response or detection engineering.
- Knowledge of NIST and ISO 2700x standards, security controls, and risk management frameworks.
- Experience with endpoint detection and response, intrusion detection, certificate management, email security, and web content filtering technologies.
- Experience planning, researching, and developing security policies, standards, and procedures.
- Experience deploying enterprise technology through managed projects using Scrum and Kanban methodologies.
- Knowledge of networking, firewalls, web application firewalls, intrusion detection and prevention systems, AWS, Microsoft Azure, and disaster recovery technologies.
- Strong troubleshooting, investigative, analytical, communication, leadership, teamwork, and problem-solving skills.
- Ability to work independently in ambiguous environments, communicate technical security issues to peers and management, and mature deployed security technologies.
- Ability to satisfactorily complete Reliability Status Clearance, law enforcement inquiry, credit check, and applicable background checks.
Benefits
- Wellness programs supporting mental, physical, and financial health.
- Opportunities to pursue varied career paths and build networking connections.
- Hybrid work arrangement allowing employees to work from home or in the office based on business, client, and leader needs.
- Reliability Status Clearance is required before starting employment, including applicable government inquiries and checks.
- Eligible employees may participate in discretionary incentive plans in addition to base pay.
About Sun Life Financial
Sun Life Financial provides life and health insurance, group benefits, retirement solutions, and asset management services for individuals, employers, and institutional investors. It generates revenue from insurance premiums and investment management fees, including through MFS Investment Management and SLC Management. Founded in 1865 and headquartered in Toronto, Canada, Sun Life operates across North America and Asia, and its shares trade on the TSX and NYSE under the symbol SLF.